CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

CVSS v3 6.7 MEDIUM

6.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2024/07/26/1	Third Party Advisory
https://github.com/GStreamer/orc	Product
https://gstreamer.freedesktop.org/modules/orc.html	Product
https://jvn.jp/en/jp/JVN02030803/	Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/07/26/1	Third Party Advisory
https://github.com/GStreamer/orc	Product
https://gstreamer.freedesktop.org/modules/orc.html	Product
https://jvn.jp/en/jp/JVN02030803/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:gstreamer:orc:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-07-26 06:15

Updated : 2024-11-21 09:31

NVD link : CVE-2024-40897

Mitre link : CVE-2024-40897

CVE.ORG link : CVE-2024-40897

JSON object : View

Products Affected

gstreamer

orc

CWE

CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2024-40897", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.0, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.0}]}, "published": "2024-07-26T06:15:02.290", "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/07/26/1", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://github.com/GStreamer/orc", "tags": ["Product"], "source": "vultures@jpcert.or.jp"}, {"url": "https://gstreamer.freedesktop.org/modules/orc.html", "tags": ["Product"], "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/jp/JVN02030803/", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "http://www.openwall.com/lists/oss-security/2024/07/26/1", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/GStreamer/orc", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://gstreamer.freedesktop.org/modules/orc.html", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://jvn.jp/en/jp/JVN02030803/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments."}, {"lang": "es", "value": "Existe una vulnerabilidad de desbordamiento de b\u00fafer en la regi\u00f3n stack de la memoria en orcparse.c de versiones de ORC anteriores a la 0.4.39. Si se enga\u00f1a a un desarrollador para que procese un archivo especialmente manipulado con el compilador ORC afectado, se puede ejecutar un c\u00f3digo arbitrario en el entorno de compilaci\u00f3n del desarrollador. Esto puede poner en peligro las m\u00e1quinas de desarrollo o los entornos de compilaci\u00f3n de CI."}], "lastModified": "2024-11-21T09:31:48.450", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gstreamer:orc:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "225518F5-6BD6-4014-ACE0-6A2B50088872", "versionEndExcluding": "0.4.39"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}